Privacy policy
Last updated: 10 November 2026
This is a translation of the Portuguese version. If the two differ, the Portuguese version prevails.
In short
- Members' data belongs to the church. Atrium stores and processes it on the church's behalf.
- Everything is stored in the European Union.
- There is no advertising and there are no tracking cookies. Just one session cookie, to keep you signed in.
- Anyone can ask for a copy of their data or ask for it to be erased.
1. Who is who
The church is the controller of the data of its members, regular attenders and visitors. The church decides what data it keeps and why.
Atrium is the processor. It processes the data only to provide the service to the church and on the church's instructions, as provided for in Article 28 of the GDPR. Atrium is operated by Wise Accord, Lda., tax number (NIF) 518333108, with its registered office at Rua Horácio Marçal, 4300-003 Porto, Portugal.
For the account data of people who use Atrium (name, e-mail, password), Atrium is the controller.
2. What data we process
User account
Name, e-mail, password (stored only as a cryptographic hash, never as text), role in each church and date of last sign-in.
Members' register, kept by the church
Name, photo, date of birth, gender, phone, e-mail, address, nationality, marital status, family relationships, status in the church, membership and baptism dates, how they came to the church, notes and the date of consent. From the address we work out the approximate location for the map.
Belonging to a church reveals a religious belief, which the GDPR treats as a special category of data (Article 9). That is why Atrium asks for nothing beyond these fields, and the church must not use the notes to keep health data or other sensitive data.
Church treasury
Income and expense entries, attached invoices and receipts and, when the church chooses, the link between a tithe or offering and a member.
Giving page
When someone reports, on a church's public page, that they have made a contribution, we keep the name, amount, method and date they give. Only the church's administrator and treasury team see this data. The sender's IP address is not stored: it is turned into a code from which the address cannot be recovered, used only to limit excessive submissions and deleted within one day.
Technical data
IP address and error logs, kept for up to 7 days for security and to fix faults.
3. What we use it for
- To provide the service: storing, displaying and exporting the church's data.
- To send necessary e-mails, such as the password reset link.
- To keep the service secure and fix errors.
We do not sell data, we do not advertise and we do not profile people.
4. Legal basis
- User accounts: performance of the contract with the church (Article 6(1)(b)).
- Members' register: determined by the church. Normally the person's consent, recorded in the register (Articles 6(1)(a) and 9(2)(a)), or the legitimate activities of a religious body in relation to its members (Article 9(2)(d)).
- Financial records: compliance with the church's legal obligations (Article 6(1)(c)).
5. Where the data is kept
The database, attachments and photos are stored under European Union jurisdiction. We do not keep copies outside Europe.
| Who helps us | What for | Where |
|---|---|---|
| Cloudflare | Hosting, database (D1) and files (R2) | European Union |
| Brevo | System e-mails: password reset, invitations and notices | France (EU) |
| Google (Gmail) | The mailbox that receives e-mails sent to support@ and privacidade@, including spreadsheets sent for import | European Union and United States, with standard contractual clauses and the EU-US Data Privacy Framework |
| Paddle (Paddle.com Market Ltd) | Subscription payment, invoices and VAT. Paddle sells Atrium as a reseller and receives only the payer's data, not members' data | United Kingdom, with an adequacy decision from the European Commission |
| OpenStreetMap Foundation | Converting the address into coordinates (without the person's name) and drawing the map | United Kingdom, with an adequacy decision from the European Commission |
6. For how long
- User account: while it is active, and for 30 days after it is closed.
- Members' register: until the church deletes the record or the person asks for it to be erased.
- Financial records: for the period the law requires of the church, which in Portugal is 10 years for accounting documents. When a person is erased, the entries remain, but without their name.
- Contribution notices: 30 days after the treasury team confirms or rejects them, and 180 days after submission if nobody decides. A confirmed contribution becomes a financial record and follows the period above.
- Backups: the database can be restored to any point in the last 30 days; after that, what was deleted cannot be recovered.
7. Your rights
You may request access to your data, rectification, erasure, restriction of processing and a copy in a machine-readable format (portability), and you may object to processing.
If you are a member of a church that uses Atrium, make the request to the church itself: the administrator has an area for exporting and erasing each person's data. You can also write to us and we will forward the request.
If you believe your data has not been handled properly, you may lodge a complaint with the data protection authority of your country. In Portugal, this is the CNPD (cnpd.pt).
8. Cookies
We use a single session cookie to keep you signed in after you sign in. It is strictly necessary and does not require consent. We do not use analytics, advertising or social media cookies, and the site's fonts are served by Atrium itself.
9. Security
- Connection always encrypted (HTTPS).
- Passwords stored only as a cryptographic hash.
- Each church sees only its own data, and each user sees only what their role allows.
- Important actions (closing and reopening months, deleting data) are logged.
10. Contact
For any privacy question: privacidade@atrium.church, or by post to Rua Horácio Marçal, 4300-003 Porto, Portugal.
If we change this policy, we notify the churches' administrators by e-mail before the change takes effect.